Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
File: h0tZG12PB26vRy4-pF07XI4TUKE.mft (raw, json)
Hash identifier: UbBLZm3PyP8iE4RlrduauLDfC2rhvV+fQa+6cVTgrd0=
Subject key identifier: 9F:18:4A:AF:A6:D0:BF:4D:4A:35:9A:4A:7C:76:35:E0:7D:D1:BE:4E
Authority key identifier: 87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
Certificate issuer: /CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Certificate serial: 019DB246E983A4CCAB35B0D42A6BD55810F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
Manifest number: 18D2
Signing time: Tue 21 Apr 2026 23:01:24 +0000
Manifest this update: Tue 21 Apr 2026 23:01:24 +0000
Manifest next update: Wed 22 Apr 2026 23:01:24 +0000
Files and hashes: 1: JqglYn9oExlpuQ-Y68kS4ik8jRI.roa (hash: lo9W0LCZNdcrhkqYexTlEJ9bxvUJuTPrwpGw86jlaFk=)
2: h0tZG12PB26vRy4-pF07XI4TUKE.crl (hash: Eoj58GoSsnlnUOBBm94KAADDYJV6A6qYyLHkuhPTfi4=)
3: vAlQFpaLpXoMpWo27m8dZRrzZKc.roa (hash: V3cMkhkIFwXZN0a+IEYOXNX5PaTP19/XRl5SDnAT0cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:46:e9:83:a4:cc:ab:35:b0:d4:2a:6b:d5:58:10:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874b591b5d8f076eaf472e3ea45d3b5c8e1350a1
Validity
Not Before: Apr 21 23:01:24 2026 GMT
Not After : Apr 22 23:01:24 2026 GMT
Subject: CN=9f184aafa6d0bf4d4a359a4a7c7635e07dd1be4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e9:22:bf:5b:58:f4:cc:ee:66:4c:88:dc:b6:
a5:29:f4:7e:39:a7:b5:ac:a3:7f:ed:da:b5:66:2c:
6e:91:4c:a5:44:6d:1b:68:a4:d9:37:89:e4:ed:ff:
1e:7d:1e:74:d3:14:3f:e6:bb:11:57:79:e0:28:3e:
df:df:e8:84:80:c3:f2:98:0d:71:3d:fc:d4:1c:cd:
a4:87:2e:7e:6f:00:b0:ff:d4:fc:f0:8b:28:09:11:
b8:c6:79:ab:39:f3:af:31:cc:c6:11:21:a0:71:aa:
db:00:eb:0e:0e:67:ef:8d:15:25:90:21:f1:8a:f1:
47:ab:6c:12:70:dc:86:b2:80:f1:8c:05:aa:cd:5d:
f6:19:02:7f:e9:9c:21:0e:37:85:a5:86:9f:0e:e7:
46:77:67:b8:1d:a8:79:07:d6:bb:7e:68:2c:50:d2:
51:98:b3:54:9a:77:fe:1a:69:d2:47:ea:a6:9d:25:
2d:0e:12:35:ec:73:6e:58:03:62:62:d9:a6:0b:8f:
ac:1e:5f:c6:2d:30:e9:27:d5:87:1d:44:39:2d:38:
a0:74:54:8d:fe:f6:54:dd:e4:b5:1e:ca:93:b1:91:
b6:e9:f4:86:c6:09:31:2c:5e:b3:2a:36:d3:c1:c3:
8f:91:77:52:5f:ac:45:67:79:2d:31:6c:fc:9a:67:
e7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:18:4A:AF:A6:D0:BF:4D:4A:35:9A:4A:7C:76:35:E0:7D:D1:BE:4E
X509v3 Authority Key Identifier:
keyid:87:4B:59:1B:5D:8F:07:6E:AF:47:2E:3E:A4:5D:3B:5C:8E:13:50:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0tZG12PB26vRy4-pF07XI4TUKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cad521-dabe-49a8-bce4-0c6a67820a58/1/h0tZG12PB26vRy4-pF07XI4TUKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:db:44:cb:58:c1:bb:96:b9:ad:e3:a5:cc:f9:31:e2:f9:16:
c8:e5:2a:b5:ca:cd:85:7a:96:d7:9e:73:1f:4d:2f:c9:af:a3:
55:f6:97:6c:d0:8b:1f:a6:82:b4:92:35:45:51:37:db:c6:27:
2e:df:91:d1:e1:d2:d9:d2:76:19:38:e5:d9:9b:37:02:f9:7b:
f3:84:e1:a6:5c:03:56:fa:cf:dd:59:54:e7:ce:30:7f:a4:17:
01:69:33:9f:3c:06:6b:c6:cf:1b:6e:42:ef:aa:ac:10:93:34:
49:f3:71:08:fd:a5:8d:19:72:dc:0d:ce:22:34:ee:12:96:1c:
fe:f4:e1:3c:d4:a5:b9:ed:a4:5f:00:af:4e:e0:2a:d3:bc:a7:
39:19:f0:c5:64:95:56:08:77:b0:5e:3e:db:7d:b2:c9:4d:ea:
71:e0:b1:0e:0d:cf:0f:dd:28:99:8a:13:db:23:60:b0:8f:89:
55:78:b5:61:c3:e1:f8:61:ff:6a:35:43:2e:ab:32:5e:38:47:
97:70:e6:e4:ad:a5:47:b7:15:1f:f6:51:78:76:f9:fd:2b:30:
94:95:a7:53:ca:c8:fa:ae:d9:ac:a8:21:a5:1f:f9:a3:b0:43:
ef:67:9e:83:b8:51:db:ff:df:d7:ce:90:d2:bd:29:74:8a:e6:
70:0b:3a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:37:40 2026 by rpki-client